Privacy Policy
This policy explains which personal data skedo.io (the "Service") processes, why, and what rights you have. It is provided under Regulation (EU) 2016/679 ("GDPR").
1. Data controller
The data controller is Host Service S.r.l., with registered office at Via Bagutta 13, 20121 Milano (MI), VAT no. 13452640967. For any request about your data, write to contact@hostservicesrl.com.
2. Data we process
Account data
Name, email address, password (stored only as a non-reversible hash), chosen language, registration and sign-in dates.
Workspace data
Workspace name, team members and their roles, invitations sent, settings.
Content
The text, images and videos you upload for publishing, with their date and publication status.
Data from connected social accounts
When you connect an account, the platform issues us an access token and lets us read some information:
- YouTube (Google): the Google account email address, and the channel's identifier, name, picture and public statistics (subscribers, number of videos, views).
- Instagram (Meta): identifier, username, name, profile picture, account type, number of followers and of media.
- Facebook (Meta): identifier and name of the authorising profile and, for each Page you grant: identifier, name, category, picture and number of followers.
- TikTok: identifier, display name, profile picture and the posting settings allowed for the account.
Access tokens are stored encrypted. We never receive or store the passwords of your social accounts.
Technical data
IP address, date and time of requests, and a log of security-relevant actions (sign-ins, invitations, role changes, connecting and disconnecting accounts).
3. Why we process data and on what basis
- Providing the Service (creating the account, managing workspaces and teams, publishing content to the channels you connected, showing you the status and data of your channels): performance of a contract.
- Security and abuse prevention: legitimate interest.
- Legal obligations (tax, requests from authorities): legal obligation.
- Service communications (invitations, notices about accounts to reconnect): performance of a contract.
We do not use your data for advertising profiling and we do not sell it to third parties.
4. Use of data received from platforms
Data obtained through the Google, Meta and TikTok APIs is used only for the features you see in the Service: showing you the connected accounts and publishing, at your request, the content you choose.
YouTube API Services and Google
skedo.io uses YouTube API Services. By using the YouTube feature you agree to the YouTube Terms of Service; Google's processing is described in the Google Privacy Policy.
skedo.io's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not use this data for advertising, we do not transfer it to third parties, and we do not use it to train artificial intelligence models.
You can revoke skedo.io's access to your Google account at any time from the Third-party access page of your Google account, as well as from the Integrations page of skedo.io.
Meta (Facebook and Instagram)
Facebook and Instagram data is processed in accordance with the Meta Platform Terms. You can revoke access from the Facebook settings ("Business integrations") and the Instagram settings ("Apps and websites").
TikTok
TikTok data is processed in accordance with the TikTok developer terms. You can revoke access from the TikTok app settings ("Security & permissions" → "Manage app permissions").
5. Who we share data with
- Social platforms: when you publish, we send the content to the platform you chose.
- Technical providers acting on our behalf as data processors: server and database hosting, email delivery.
- Authorities, when required by law.
Data is stored on servers located in the European Union. Social platforms may process published content outside the European Union, as described in their own policies.
6. How long we keep data
- Account and workspace: as long as the account is active.
- Tokens and social account data: as long as the account stays connected; deleted when you disconnect it.
- Uploaded files: until you delete the publication.
- Security logs: up to 12 months.
7. Data deletion
You can delete your data in these ways:
- A social account: on the Integrations page press "Disconnect". The tokens and data of that account are removed from our systems immediately.
- A publication: on the Publications page press "Delete". The file is removed from our servers; what is already live on the social network remains under that network's control.
- The whole account or workspace: write to contact@hostservicesrl.com from the account's email address. We delete the data within 30 days, except what the law requires us to keep.
8. Your rights
You have the right to access your data, have it corrected or erased, restrict or object to processing, and receive it in a portable format. You can exercise these rights by writing to the data controller. You also have the right to lodge a complaint with your data protection authority; in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it).
9. Cookies
skedo.io uses technical cookies needed for the Service to work: the session cookie that keeps you signed in, and your language preference. We do not use profiling cookies or advertising tools.
On the public website (not in the application) we use Google Analytics 4, a service by Google Ireland Ltd, for aggregate statistics about visits: number of visitors, pages read, where they come from. Measurement cookies are set only after your consent, given through the banner at the bottom of the page; without consent Google Analytics sets no cookies and collects no identifiers. IP addresses are not stored. You can change your choice at any time from the "Cookie preferences" link in the footer. Information about how Google processes data: policies.google.com/privacy.
10. Security
Connections are encrypted (HTTPS). Passwords are stored as non-reversible hashes, social access tokens are encrypted, each workspace's data is separated from the others, and access is governed by team roles.
11. Changes
If we make material changes to this policy we will notify you in the Service or by email. The date above shows the latest version.